$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYBJrUVuVGDLUnw7lODgOMJlXrY.roa File: BYBJrUVuVGDLUnw7lODgOMJlXrY.roa (raw, json) Hash identifier: ANZBGR96EcBcbd4MsUD3vjUHVyhJoSOHms0RwRR+1Sc= Subject key identifier: 05:80:49:AD:45:6E:54:60:CB:52:7C:3B:94:E0:E0:38:C2:65:5E:B6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A4C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYBJrUVuVGDLUnw7lODgOMJlXrY.roa Signing time: Sun 30 Jun 2024 01:48:29 +0000 ROA not before: Sun 30 Jun 2024 01:48:29 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 110.161.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:48:29 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=058049AD456E5460CB527C3B94E0E038C2655EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:d5:51:43:d0:23:ef:4a:f8:34:47:54:46: 36:53:e3:87:4e:ca:a6:d7:f1:61:8a:37:ee:01:f4: 30:a9:fd:9c:9b:f8:a1:f1:f3:14:38:aa:cc:fa:1f: 7f:1a:7f:7e:87:f0:a8:7e:c4:59:40:bd:82:a4:47: 9a:76:6e:fd:f9:7c:d5:69:5e:26:aa:2a:b4:6f:b2: f7:6b:aa:7c:1b:85:99:9d:96:13:26:85:7c:47:c6: 3a:a8:d0:9a:97:b2:3d:f3:c6:f4:e7:8a:78:8d:31: 79:a7:45:f6:71:25:1a:9e:72:a1:06:22:11:bb:ba: 19:df:c7:7d:f8:12:48:5b:19:31:fb:d9:2e:11:94: db:03:ea:bd:e6:64:a7:e8:9f:14:60:2e:11:0e:be: 02:64:d3:73:3a:c7:51:71:6d:b1:85:b7:ac:d2:2b: 34:58:52:62:18:a7:17:b6:3d:ee:d8:40:ff:2a:89: 9e:9e:e0:b3:63:fc:07:a6:4a:67:01:65:f8:2e:45: 3b:41:80:3a:2a:15:a5:2d:8d:ba:73:4f:40:fe:a2: 2a:51:52:49:31:b5:25:20:cf:8b:7a:0d:35:dc:7b: 48:82:4f:32:da:98:c8:b7:71:ea:6a:d9:64:91:a3: 66:ad:17:25:27:b8:85:b1:f3:0d:1a:33:9f:7a:eb: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:80:49:AD:45:6E:54:60:CB:52:7C:3B:94:E0:E0:38:C2:65:5E:B6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYBJrUVuVGDLUnw7lODgOMJlXrY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.161.204.0/23 Signature Algorithm: sha256WithRSAEncryption ac:9f:5a:d1:15:39:f5:49:74:5a:7b:4c:3d:d4:d2:88:42:4f: d7:89:a9:87:d6:13:8c:03:ed:6a:6e:06:a7:f5:b9:75:8a:fa: 83:bf:06:68:23:1e:64:fd:6c:79:3c:1f:39:59:8c:33:d1:39: fe:3b:d1:f5:db:59:d1:71:af:44:d7:1f:89:41:86:cc:20:47: 87:d7:57:4b:a6:25:e9:d2:f7:9e:52:40:e5:2a:87:9e:7c:e8: 55:f5:ac:ec:80:6e:1c:6c:de:bc:62:9f:ca:4b:99:87:fe:ee: ba:e8:3e:b7:af:9f:50:b3:33:59:d4:ed:94:a5:c4:9c:80:9e: 6b:18:1f:31:ae:26:45:72:43:34:56:70:af:e1:3e:ea:de:9f: 77:5c:64:5b:95:dc:1f:4a:50:15:9c:a8:40:68:80:72:5d:d3: 6b:75:e1:32:b5:d3:ee:45:ab:25:f3:90:11:16:c0:ac:68:80: bd:31:73:51:90:27:c7:65:ef:9e:c0:6d:55:09:cd:cf:cd:20: fa:2f:89:e6:f6:d5:96:7f:62:11:1f:4d:bb:a1:23:a9:c1:f1: ab:0e:6a:ba:2c:33:a9:9e:c4:01:60:c5:c0:98:51:a3:0b:c8: 16:f7:06:e3:19:a9:00:99:3b:ae:15:c7:85:45:3a:bd:1e:4f: 1b:1a:ea:7e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ4MjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDA1ODA0OUFENDU2RTU0 NjBDQjUyN0MzQjk0RTBFMDM4QzI2NTVFQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8/dVRQ9Aj70r4NEdURjZT44dOyqbX8WGKN+4B9DCp/Zyb+KHx 8xQ4qsz6H38af36H8Kh+xFlAvYKkR5p2bv35fNVpXiaqKrRvsvdrqnwbhZmdlhMm hXxHxjqo0JqXsj3zxvTniniNMXmnRfZxJRqecqEGIhG7uhnfx334EkhbGTH72S4R lNsD6r3mZKfonxRgLhEOvgJk03M6x1FxbbGFt6zSKzRYUmIYpxe2Pe7YQP8qiZ6e 4LNj/AemSmcBZfguRTtBgDoqFaUtjbpzT0D+oipRUkkxtSUgz4t6DTXce0iCTzLa mMi3cepq2WSRo2atFyUnuIWx8w0aM5966+YlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBYBJrUVuVGDLUnw7lODgOMJlXrYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JZQkpyVVZ1VkdETFVudzdsT0RnT01KbFhyWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFuocwwDQYJKoZIhvcNAQELBQADggEBAKyfWtEVOfVJdFp7TD3U0ohCT9eJ qYfWE4wD7WpuBqf1uXWK+oO/BmgjHmT9bHk8HzlZjDPROf470fXbWdFxr0TXH4lB hswgR4fXV0umJenS955SQOUqh5586FX1rOyAbhxs3rxin8pLmYf+7rroPrevn1Cz M1nU7ZSlxJyAnmsYHzGuJkVyQzRWcK/hPuren3dcZFuV3B9KUBWcqEBogHJd02t1 4TK10+5FqyXzkBEWwKxogL0xc1GQJ8dl757AbVUJzc/NIPovieb21ZZ/YhEfTbuh I6nB8asOarosM6mexAFgxcCYUaMLyBb3BuMZqQCZO64Vx4VFOr0eTxsa6n4= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:40 2024 by rpki-client on console-ams.rpki-client.org